Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33342d3334203d3e203533313138.roa
File:                     323830343a3266343a3a2f33342d3334203d3e203533313138.roa (raw, json)
Hash identifier:          6KzIGOQdgqZlyoSVRPzuC53LbZcpeAHZQGb9tB3+kdg=
Subject key identifier:   79:85:B1:7E:CA:A4:77:55:FF:06:EA:1D:BA:01:D9:2E:27:8A:8A:5E
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       3C0C9B44FE2C11EE3161914E97D67E4C82E32098
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33342d3334203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:09:53 +0000
ROA not before:           Thu 27 Jul 2023 13:04:53 +0000
ROA not after:            Thu 25 Jul 2024 13:09:53 +0000
asID:                     53118
IP address blocks:        2804:2f4::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0c:9b:44:fe:2c:11:ee:31:61:91:4e:97:d6:7e:4c:82:e3:20:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:04:53 2023 GMT
            Not After : Jul 25 13:09:53 2024 GMT
        Subject: CN=7985B17ECAA47755FF06EA1DBA01D92E278A8A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:d6:ff:1b:e2:e6:53:62:20:00:9f:10:ee:
                    88:17:a5:55:e5:bf:39:23:d4:d0:ba:e8:da:24:25:
                    24:f0:a6:68:b1:09:c9:70:f5:ac:f8:23:9f:bb:47:
                    03:15:e9:3b:88:94:27:50:4b:d4:ab:60:2f:92:45:
                    6f:d3:7c:1f:9d:76:c7:96:51:a4:0d:75:83:48:97:
                    f6:e8:06:02:36:23:14:7d:ac:8f:53:a3:8a:82:01:
                    5f:fc:98:e2:62:9b:e0:8f:1c:3c:b5:ce:ea:a4:87:
                    c8:f1:db:fe:11:f5:d4:6a:dd:bc:9e:58:31:8f:71:
                    1d:1f:53:b9:c0:b0:9c:ad:b5:a7:82:89:bb:4b:34:
                    5f:a5:cd:30:33:9b:15:4c:55:37:0d:6e:2d:b1:bf:
                    ac:e6:a6:b6:13:7f:64:51:d5:8f:b8:29:05:17:e3:
                    8e:23:9f:cf:65:22:c8:c7:d4:cd:fe:c8:c2:c3:cd:
                    d6:88:31:5e:0d:ac:95:fb:b5:4b:a8:5e:06:29:aa:
                    5d:36:ea:89:19:10:ee:64:ef:f3:92:98:bf:ea:07:
                    f7:7c:0e:af:63:c9:82:05:91:98:37:42:ec:4b:e2:
                    9a:e2:a2:9c:be:04:64:73:fd:21:d4:dc:04:f2:b1:
                    62:f6:d6:cc:cb:eb:3e:fa:96:76:cc:d5:c3:2f:84:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:B1:7E:CA:A4:77:55:FF:06:EA:1D:BA:01:D9:2E:27:8A:8A:5E
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33342d3334203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:48:7b:1a:5a:a2:76:45:7e:78:05:9a:ba:7e:00:b8:53:bb:
         20:3d:71:f7:f3:87:c4:b0:e1:dd:e4:a6:b1:6a:15:c3:54:95:
         fa:f6:9d:73:16:80:77:d9:d6:75:fb:34:5f:cc:fa:f1:cc:1a:
         a3:22:07:bc:e5:a3:6e:49:25:5d:a7:2b:d0:72:98:35:b9:48:
         48:bf:7b:bf:0f:3b:e8:68:be:87:f3:1f:8d:ce:d6:36:43:1a:
         09:15:8e:9d:22:c1:43:60:cb:fb:75:31:35:14:9f:0c:56:d8:
         f2:91:76:b4:ee:3b:6a:e4:29:95:b4:21:bc:91:31:a5:4c:2f:
         6b:c7:d8:1f:f0:a4:e2:fa:bd:96:18:c6:de:87:21:c6:6b:5a:
         52:5d:6f:76:4a:65:08:ab:73:f7:15:a0:13:87:2a:c7:2d:ed:
         76:94:84:f7:eb:de:3a:95:1b:7d:7d:59:e8:a6:86:fd:4e:ff:
         64:1d:c6:0d:4f:e4:42:3b:6a:24:cc:e8:1b:a5:e1:9e:6f:3a:
         7e:50:42:35:30:ba:90:e5:5b:cb:af:d5:f0:54:dd:b3:61:52:
         82:92:65:b5:cb:1e:c3:19:07:96:9c:57:12:e8:12:37:8c:af:
         02:51:ef:2f:bf:f8:39:f2:d1:cf:b8:e1:3d:a1:6f:06:bf:f7:
         f9:4e:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org